AMD AMD EPYCâ„¢ 9005 Series Processors
En bref
- Source
- NVD
- EPSS
- EPSS 0.17 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Deferred
Description
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity
Faiblesses (CWE)
- CWE-457 — Use of Uninitialized Variable
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 4.0 | MEDIUM 5.9 | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N | AMD |
| CVSS 4.0 | MEDIUM 5.9 | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · psirt@amd.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2025-207139
- GCVE · GCVE-0-2025-29952
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD EPYC™ 9005 Series Processors | unaffected TurinPI 1.0.0.6 |
| AMD · AMD EPYC™ Embedded 9005 Series Processors | unaffected EmbTurinPI-SP5_1.0.0.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |